Mikrotik Routers (RouterBoard & RouterOS)

Lowyat.NET forums

Lowyat.NET Kopitiam Garage Sales

Lowyat.NET Rules and Regulations FAQ Help Search Members

Welcome Guest ( Log In | Register )

Lowyat.NET -> Networks and Broadband

Bump Topic Add Reply RSS Feed

176 Pages « < 119 120 121 122 123 > » Bottom

Outline · [ Standard ] · Linear+

Enterprise Networking Mikrotik Routers (RouterBoard & RouterOS), User and owner discussion group

views

soonwai	Nov 26 2021, 08:14 PM Show posts by this member only \| IPv6 \| Post #2401
 All Stars 11,459 posts Joined: Oct 2007 From: KL	QUOTE(Oltromen Ripot @ Nov 26 2021, 04:48 PM) Home use. Wireless feature unnecessary as I wire-backhaul to 2 Deco M9 Plus. I am looking into automated failover from primary (1) Unifi (dial out PPPoE) to secondary (2) Huawei B618. Questions: (1) I see all Mikrotik 5-port routers have dedicated 1-port WAN. Does this mean I cannot use additional port (s) to achieve multi-WAN? (2) Mikrotik routers can handle fibre vlan? (already have tp-link vlan switch to (un)tag vlan500 if necessary) (3) Mikrotik routers can handle DHCPv4? DHCPv6 and/or similar? (4) Mikrotik routers can do DDNS to any provider? (i use cloudns) (5) Mikrotik routers have firewall to prevent intrusion from outside? (6) Mikrotik have access to command line? Is it linux? Can install packages? to run any command? (7)n Which Mikrotik router is capable of handling 1Gbps fibre? (for future-proof). The Hex? (w/ tp-link vlan switch, i was already able to use huawei b618 to prioritise dial to unifi and failover to lte-a network. however i was disappointed that the gigabit wan and lan port on b618 was only able to max 171Mbps regardless fibre or lte-a. all cables used during test are CAT6e. replacing b618 back to tm-supplied router was able to get back ~500Mbps as subscribed, so test wasn't influenced by wifi speed.) (1) Any interface can be configured as WAN. Even the wifi interface. You can have 4 WAN and 1 LAN if you like. (2) VLAN, yes. (3) DHCPv4, yes. The DHCPv6 server in RouterOS 6.x can only give out prefixes not addresses. (4) Yes, if the provider has some sort of API for updating DNS records. (5) Comes with a preconfigured but very basic firewall. Up to you to config. (6) SSH and telnet. RouterOS is based on Linux but cannot install 3rd party packages. (7) Hex can handle 1Gbps only with Fasttrack running (Mikrotik's term for NAT acceleration). If no Fasttrack, probably RB3011 or RB4011 and above. This post has been edited by soonwai: Nov 26 2021, 08:16 PM
Card PM	Report Top Like Quote Reply

go626201	Nov 26 2021, 08:17 PM Show posts by this member only \| Post #2402
Regular Senior Member 1,882 posts Joined: Sep 2017	QUOTE(Oltromen Ripot @ Nov 26 2021, 04:48 PM) Home use. Wireless feature unnecessary as I wire-backhaul to 2 Deco M9 Plus. I am looking into automated failover from primary (1) Unifi (dial out PPPoE) to secondary (2) Huawei B618. Questions: (1) I see all Mikrotik 5-port routers have dedicated 1-port WAN. Does this mean I cannot use additional port (s) to achieve multi-WAN? (2) Mikrotik routers can handle fibre vlan? (already have tp-link vlan switch to (un)tag vlan500 if necessary) (3) Mikrotik routers can handle DHCPv4? DHCPv6 and/or similar? (4) Mikrotik routers can do DDNS to any provider? (i use cloudns) (5) Mikrotik routers have firewall to prevent intrusion from outside? (6) Mikrotik have access to command line? Is it linux? Can install packages? to run any command? (7)n Which Mikrotik router is capable of handling 1Gbps fibre? (for future-proof). The Hex? (w/ tp-link vlan switch, i was already able to use huawei b618 to prioritise dial to unifi and failover to lte-a network. however i was disappointed that the gigabit wan and lan port on b618 was only able to max 171Mbps regardless fibre or lte-a. all cables used during test are CAT6e. replacing b618 back to tm-supplied router was able to get back ~500Mbps as subscribed, so test wasn't influenced by wifi speed.) 1.You can use other port for redundancy.Just need to do additional setup. 2.Yes,it can handle the vlan. 3.Yes. 4.You can write your own script to update the ddns or find online.(As long as the router can run the script,then ddns update is easy work for mikrotik) 5.Yes,u can customize the firewall with very specific rule. Like block a specific ip or ip prefix or only allow a port to access by specific ip or anything.(Mikrotik can setup with any rule) 6.Yes,u can access it with telnet or anyway u like,most people use Winbox-Mikrotik official software/app for mikrotik device. As for packages,no it does not support any application that not provided by Mikrotik.(But ROS7 is providing Docker functionality,so u can install anything that can work in docker)
Card PM	Report Top Like Quote Reply

Gaara92	Nov 26 2021, 09:03 PM Show posts by this member only \| Post #2403
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(rezzorix @ Nov 26 2021, 01:56 PM) I see.. well then I hope that gets fixed soon... When adding a DHCP Client in IPv6 I get an IP-address but somehow not able to get it to my other clients... <a href='https://pictr.com/images/2021/11/26/B4D57v.md.png' target='_blank'>https://pictr.com/images/2021/11/26/B4D57v.md.png </a> Hi you need to assign an address to your LAN interface so the ND can send the RA to your clients.
Card PM	Report Top Like Quote Reply

Oltromen Ripot	Nov 26 2021, 09:27 PM Show posts by this member only \| IPv6 \| Post #2404
👍 999999 person Likes this member Senior Member 4,034 posts Joined: Dec 2019	QUOTE(soonwai @ Nov 26 2021, 08:14 PM) QUOTE(go626201 @ Nov 26 2021, 08:17 PM) thank you, both.
Card PM	Report Top Like Quote Reply

rezzorix	Nov 29 2021, 09:12 PM Show posts by this member only \| Post #2405
Getting Started Junior Member 98 posts Joined: Nov 2021	QUOTE(Gaara92 @ Nov 26 2021, 09:03 PM) Hi you need to assign an address to your LAN interface so the ND can send the RA to your clients. Thanks for the response. I actually have IPv6 address lists for each interface .../64... Guess I need some time over one of the next weekends to figure this all out.
Card PM	Report Top Like Quote Reply

Gaara92	Nov 29 2021, 09:41 PM Show posts by this member only \| Post #2406
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(rezzorix @ Nov 29 2021, 09:12 PM) Thanks for the response. I actually have IPv6 address lists for each interface .../64... Guess I need some time over one of the next weekends to figure this all out. share your ipv6 config or screenshot here.
Card PM	Report Top Like Quote Reply

benson208	Dec 8 2021, 04:06 AM Show posts by this member only \| IPv6 \| Post #2407
New Member Newbie 12 posts Joined: Feb 2009	anyone already try RouterOS 7.1 stable release? Or better stay at LTS 6.48.6
Card PM	Report Top Like Quote Reply

go626201	Dec 8 2021, 11:57 AM Show posts by this member only \| Post #2408
Regular Senior Member 1,882 posts Joined: Sep 2017	QUOTE(benson208 @ Dec 8 2021, 04:06 AM) anyone already try RouterOS 7.1 stable release? Or better stay at LTS 6.48.6 If you want stability then stay at ROS6 for 1 more years. If you want new features then u can upgrade to ROS7,but with more bugs. (And also DHCPv6-IPv6 with PPPoE might not functionable without manual workaround)
Card PM	Report Top Like Quote Reply

syahpian	Dec 8 2021, 07:12 PM Show posts by this member only \| IPv6 \| Post #2409
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	QUOTE(go626201 @ Dec 8 2021, 11:57 AM) If you want stability then stay at ROS6 for 1 more years. If you want new features then u can upgrade to ROS7,but with more bugs. (And also DHCPv6-IPv6 with PPPoE might not functionable without manual workaround) yup, that corect, but i manage to get ipv6 working on ros 7.1. not sure how i able to do it through This post has been edited by syahpian: Dec 8 2021, 07:27 PM
Card PM	Report Top Like Quote Reply

Gaara92	Dec 9 2021, 11:18 PM Show posts by this member only \| Post #2410
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(syahpian @ Dec 8 2021, 07:12 PM) yup, that corect, but i manage to get ipv6 working on ros 7.1. not sure how i able to do it through mind to share your setting?
Card PM	Report Top Like Quote Reply

syahpian	Dec 9 2021, 11:32 PM Show posts by this member only \| IPv6 \| Post #2411
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	QUOTE(Gaara92 @ Dec 9 2021, 11:18 PM) mind to share your setting? my ipv6 setting » Click to show Spoiler - click again to hide... « CODE /ipv6 address add from-pool=IPv6 interface=bridge /ipv6 dhcp-client add interface=UniFi pool-name=IPv6 rapid-commit=no request=prefix \ use-peer-dns=no /ipv6 firewall address-list add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 add address=::1/128 comment="defconf: lo" list=bad_ipv6 add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 add address=100::/64 comment="defconf: discard only " list=bad_ipv6 add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 add address=::224.0.0.0/100 comment="defconf: other" list=bad_ipv6 add address=::127.0.0.0/104 comment="defconf: other" list=bad_ipv6 add address=::/104 comment="defconf: other" list=bad_ipv6 add address=::255.0.0.0/104 comment="defconf: other" list=bad_ipv6 /ipv6 firewall filter add action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid disabled=yes add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ icmpv6 add action=accept chain=input comment="defconf: accept UDP traceroute" port=\ 33434-33534 protocol=udp add action=accept chain=input comment=\ "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ udp src-address=fe80::/10 add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ protocol=udp add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ ipsec-ah add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ ipsec-esp add action=accept chain=input comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=input comment=\ "defconf: drop everything else not coming from LAN" disabled=yes \ in-interface-list=!LAN add action=accept chain=forward comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalid disabled=yes add action=drop chain=forward comment=\ "defconf: drop packets with bad src ipv6" disabled=yes src-address-list=\ bad_ipv6 add action=drop chain=forward comment=\ "defconf: drop packets with bad dst ipv6" disabled=yes dst-address-list=\ bad_ipv6 add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ disabled=yes hop-limit=equal:1 protocol=icmpv6 add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ icmpv6 add action=accept chain=forward comment="defconf: accept HIP" protocol=139 add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ 500,4500 protocol=udp add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ ipsec-ah add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ ipsec-esp add action=accept chain=forward comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=forward comment=\ "defconf: drop everything else not coming from LAN" disabled=yes \ in-interface-list=!LAN /ipv6 nd set [ find default=yes ] advertise-dns=no /ipv6 nd prefix default set preferred-lifetime=1h valid-lifetime=2h
Card PM	Report Top Like Quote Reply

Gaara92	Dec 10 2021, 12:09 AM Show posts by this member only \| Post #2412
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(syahpian @ Dec 9 2021, 11:32 PM) my ipv6 setting » Click to show Spoiler - click again to hide... « CODE /ipv6 address add from-pool=IPv6 interface=bridge /ipv6 dhcp-client add interface=UniFi pool-name=IPv6 rapid-commit=no request=prefix \ use-peer-dns=no /ipv6 firewall address-list add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 add address=::1/128 comment="defconf: lo" list=bad_ipv6 add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 add address=100::/64 comment="defconf: discard only " list=bad_ipv6 add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 add address=::224.0.0.0/100 comment="defconf: other" list=bad_ipv6 add address=::127.0.0.0/104 comment="defconf: other" list=bad_ipv6 add address=::/104 comment="defconf: other" list=bad_ipv6 add address=::255.0.0.0/104 comment="defconf: other" list=bad_ipv6 /ipv6 firewall filter add action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid disabled=yes add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ icmpv6 add action=accept chain=input comment="defconf: accept UDP traceroute" port=\ 33434-33534 protocol=udp add action=accept chain=input comment=\ "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ udp src-address=fe80::/10 add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ protocol=udp add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ ipsec-ah add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ ipsec-esp add action=accept chain=input comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=input comment=\ "defconf: drop everything else not coming from LAN" disabled=yes \ in-interface-list=!LAN add action=accept chain=forward comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalid disabled=yes add action=drop chain=forward comment=\ "defconf: drop packets with bad src ipv6" disabled=yes src-address-list=\ bad_ipv6 add action=drop chain=forward comment=\ "defconf: drop packets with bad dst ipv6" disabled=yes dst-address-list=\ bad_ipv6 add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ disabled=yes hop-limit=equal:1 protocol=icmpv6 add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ icmpv6 add action=accept chain=forward comment="defconf: accept HIP" protocol=139 add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ 500,4500 protocol=udp add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ ipsec-ah add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ ipsec-esp add action=accept chain=forward comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=forward comment=\ "defconf: drop everything else not coming from LAN" disabled=yes \ in-interface-list=!LAN /ipv6 nd set [ find default=yes ] advertise-dns=no /ipv6 nd prefix default set preferred-lifetime=1h valid-lifetime=2h your pppoe profile using default profile?
Card PM	Report Top Like Quote Reply

syahpian	Dec 10 2021, 12:11 AM Show posts by this member only \| IPv6 \| Post #2413
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	QUOTE(Gaara92 @ Dec 10 2021, 12:09 AM) your pppoe profile using default profile? yup, using default profile
Card PM	Report Top Like Quote Reply

Gaara92	Dec 10 2021, 12:13 AM Show posts by this member only \| Post #2414
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(syahpian @ Dec 10 2021, 12:11 AM) yup, using default profile oh wait i am misunderstanding here. The problem only resist in model RB5009, other model is working fine. My mistake.
Card PM	Report Top Like Quote Reply

cwtien	Dec 10 2021, 02:58 PM Show posts by this member only \| Post #2415
Casual Junior Member 477 posts Joined: Jan 2003 From: Seri Kembangan	QUOTE(Gaara92 @ Dec 10 2021, 12:13 AM) oh wait i am misunderstanding here. The problem only resist in model RB5009, other model is working fine. My mistake. Doh! And there I thought I could finally get ipv6 working on RB5009 . Nevermind, IPv6 is only 'good-to-have', not a 'must-have'. This post has been edited by cwtien: Dec 10 2021, 03:08 PM
Card PM	Report Top Like Quote Reply

syahpian	Dec 10 2021, 07:43 PM Show posts by this member only \| IPv6 \| Post #2416
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	btw, i want to upgrade my old rb2011, is hex good enough for 800Mbps without enabling fasttack? this rb2011 cannot get full speed without enabling fasttrack, maybe because hardware too old already This post has been edited by syahpian: Dec 10 2021, 07:44 PM
Card PM	Report Top Like Quote Reply

Gaara92	Dec 10 2021, 09:34 PM Show posts by this member only \| Post #2417
Herald Junior Member 612 posts Joined: Mar 2008	QUOTE(cwtien @ Dec 10 2021, 02:58 PM) Doh! And there I thought I could finally get ipv6 working on RB5009 . Nevermind, IPv6 is only 'good-to-have', not a 'must-have'. Don't worry, there are already people submitted the support ticket regarding this issue. The dev already take note on this matter and will be fix in the next stable release. QUOTE(syahpian @ Dec 10 2021, 07:43 PM) btw, i want to upgrade my old rb2011, is hex good enough for 800Mbps without enabling fasttack? this rb2011 cannot get full speed without enabling fasttrack, maybe because hardware too old already get a hap ac2 or hap ac3 based on @soonwai experience. Why do you need to turn off fastrack? Are you doing mangle rules ?
Card PM	Report Top Like Quote Reply

syahpian	Dec 10 2021, 09:54 PM Show posts by this member only \| IPv6 \| Post #2418
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	QUOTE(Gaara92 @ Dec 10 2021, 09:34 PM) Don't worry, there are already people submitted the support ticket regarding this issue. The dev already take note on this matter and will be fix in the next stable release. get a hap ac2 or hap ac3 based on @soonwai experience. Why do you need to turn off fastrack? Are you doing mangle rules ? want to use fq_codel queue, after upgrade to 500Mbps, the router cannot keep up witth the speed, need to enable fasttrack only can get full speed i see, let me check both first This post has been edited by syahpian: Dec 10 2021, 10:03 PM
Card PM	Report Top Like Quote Reply

rioven	Dec 11 2021, 12:10 AM Show posts by this member only \| IPv6 \| Post #2419
Enthusiast Senior Member 975 posts Joined: Sep 2004 From: Setapak	fq qodel need higher cpu power...perhaps safe bet will be rb4011/rb5009 or higher. ac2/ac3 without fasttrack+queue will be around 500mbps
Card PM	Report Top Like Quote Reply

syahpian	Dec 11 2021, 12:45 AM Show posts by this member only \| IPv6 \| Post #2420
Enthusiast Junior Member 818 posts Joined: Jul 2008 From: Kota Kinabalu <-> Kuala Lumpur	QUOTE(rioven @ Dec 11 2021, 12:10 AM) fq qodel need higher cpu power...perhaps safe bet will be rb4011/rb5009 or higher. ac2/ac3 without fasttrack+queue will be around 500mbps both rb4011/rb5009 is outside my budget through, max is rm 500, that why im asking here
Card PM	Report Top Like Quote Reply

« Next Oldest · Networks and Broadband · Next Newest »

176 Pages « < 119 120 121 122 123 > » Top

Add Reply Options

Change to:

0.0296sec

0.82

6 queries

GZIP Disabled
Time is now: 20th December 2025 - 12:05 PM

All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)

Removal Request

Powered by Invision Power Board © 2025 IPS, Inc.